Kopexa Workforce · from October 2026
Your people know what to do. And you can prove it.
Onboarding, annual training and policies run as tasks with due dates. When the auditor asks for evidence, the answer is already there.
Hi Jana
Up next
Information security 2026
overdue by 4 weeks
- Welcome message from leadership
- Confirm employment contract attachments
- Your personal details
- Code of conduct
- Security check
- Confirm privacy policy
- Spot phishing
4 of 7 required tasks done
Questions?
Lisa Weber, People Team
Example view with fictional brands.
Recognise any of these?
Four situations that have nothing to do with certification
They still cost you time every month, and they cost you nerves at audit time.
Day one is five emails from three people
One colleague sends the contract, someone else the IT rules, the rest is passed on verbally. Two weeks later nobody knows what actually landed.
Annual training goes out on a mailing list
Some people reply straight away, some never do. You keep a list of names and dates and chase by hand until the year is over.
The auditor asks for evidence
The training happened, you know that. The proof just sits in an inbox, a slide deck and a calendar entry, held by three different people.
Someone leaves and the rest stays open
Laptop returned, access revoked, confidentiality confirmed once more. Usually it happens. It rarely leaves a trace.
None of this needs a certificate as its trigger. It just needs someone keeping it in order.
How it runs
You set up a flow, the rest takes care of itself
Tasks with due dates instead of reminder emails. People see what is due, you see where it is stuck. Training software nobody needs to learn to operate.
Assign a flow
A task set bundles what belongs together, for example everything for the first two weeks. Assign it instead of sending pieces one by one.
Five kinds of task, your content
Watch a video, confirm a document, fill in a form, pass a test, work through an e-learning unit. What goes in is yours to decide: your policies, your rules, your wording. Nobody hands you a generic course that does not fit how you actually work.
An order that holds
Follow-up tasks only open once the test is passed. Nobody skips the training, because nothing moves on without it.
Set once, returns every year
Recurring obligations come back on their own, with a fresh due date and fresh evidence. No list for anyone to maintain.
The evidence
When the auditor asks, the answer is already there
Every completed task creates a record, and that record hangs off the requirement it counts towards. Not in a list somebody keeps on the side.
Spot phishing, completed 14 July
ISO 27001 A.6.3 Information security awareness
- Training record with date and result
- Proof of competence, as ISO 9001 requires
- Policy acknowledgement with timestamp
- Evidence for every cycle, not just the latest one
That turns a box-ticking exercise into a record you can hand over at audit time without searching first.
Sources: NIS2 Directive (EU) 2022/2555, ISO/IEC 27001, ISO 9001. As of August 2026
From your employees' side
One place instead of seven emails
Whoever logs in sees what is due and who to ask. And only what actually concerns them. That is the difference between done and accounted for.
- What is up next, with due date and estimated time
- Required and optional training kept apart, so required does not look optional
- A knowledge base you maintain yourselves, with permissions per department. Everyone sees what applies to their work, without being buried in the rest
- Work instructions and processes live there too, right down to the BPMN diagram. New colleagues see how work actually happens here instead of piecing it together by asking around
- Named contacts instead of an anonymous portal
- Stays useful after onboarding, as the place for policies and training
Joining and leaving
Two ends of the same flow
People who join know what to do from day one. People who leave leave no open questions behind.
Joining
From the contract through master data to the first training. Your new colleague knows what is expected, and you know what is already done.
Leaving
Returns, access, final confirmations. The same mechanism in reverse, ending in a clean close rather than an open question.
Access and branding
Looks like you, not like us
Your people land in your space with your logo and your colours. That lowers the barrier, because nobody has to explain why a foreign product suddenly shows up.
- Sign in through your existing identity provider via OIDC federation
- Or a dedicated account, passwordless if you prefer
- Your sign-in runs in a space of its own, separated from every other customer, and follows your rules rather than ours
- Your own logo and colours in the employee area
- NordwerkHi JanaYour space
- Hellwig LogistikHi TimoYour space
- Brunner WerkeHi SaraYour space
Example view with fictional brands. Sign-in itself runs through Kopexa.
Straight answer
What ships in October and what comes later
In from the start
- Task sets for onboarding, offboarding and recurring training
- Video, document, form, test and e-learning as task types
- Due dates, progress and unlocking once a test is passed
- Knowledge base with per-department permissions, so everyone sees exactly what applies to them
- Acknowledgements and training records, linked to your requirements
- Access via OIDC federation, a dedicated account or passwordless, with your own branding
Coming after that
- Ready-made content from us, such as information security, data protection and phishing
At launch you bring your own content. We would rather say that up front than surprise you with it in October.
At launch
We will let you know once it is there
No pilot programme, no ranked waiting list. You get a message when Workforce launches, and you decide then.